$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: NEeXccQlixwU7LLOEp46L0DlXNumu7fvt71u//I4QG0= Subject key identifier: 4E:BD:42:41:A1:4F:7F:B9:6F:87:11:63:33:48:C2:72:6C:81:F3:B3 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 04AF Signing time: Thu 24 Apr 2025 23:40:39 +0000 Manifest this update: Thu 24 Apr 2025 23:40:38 +0000 Manifest next update: Thu 01 May 2025 23:40:38 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: bHh73xwHYzbQOqQvAu0DMeW3KcHJdhVGBx3WUSi14cc=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Apr 24 23:40:38 2025 GMT Not After : May 1 23:40:38 2025 GMT Subject: CN=680acbf6-01e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:dd:a8:2b:59:ea:26:1a:fa:cb:bd:ed:8e: 92:4c:57:e0:1a:b3:18:5f:a6:e7:80:a2:1e:dd:1f: 75:bc:53:c1:94:a7:ca:ae:72:e8:0c:9d:4b:a5:78: ad:8a:51:08:9d:37:c0:f9:6b:24:ea:e4:b9:c5:a2: 7e:39:cb:52:7d:72:a0:17:f0:02:c6:7c:c5:2f:68: 81:25:82:64:7f:83:b8:82:c0:64:60:c0:69:21:26: be:21:26:f1:f1:18:9c:34:88:d3:cd:67:62:f0:b8: 09:63:da:3d:b9:db:27:18:18:10:a6:12:00:a8:ab: 83:21:3b:e6:bc:9f:2d:c0:aa:87:43:d9:bb:36:f5: 0f:47:02:55:9c:9b:13:b4:62:0e:50:28:83:2f:55: c7:22:79:9e:b7:fe:db:41:dc:1e:f1:59:e3:a3:ad: 83:a3:7c:35:b1:6f:a5:39:ac:2c:ec:5f:45:1e:49: 8b:df:82:00:64:4e:32:5c:0f:e0:55:18:99:01:84: 85:9a:8d:20:da:c4:92:60:3e:49:2c:9c:a6:91:2b: 3e:6c:41:e5:22:1a:4e:34:90:fc:fb:82:9d:1d:29: 7e:97:f0:12:60:29:0f:39:bb:00:a9:3a:a0:4c:2e: b6:4f:8b:0e:d5:41:90:ad:b3:87:a7:96:88:d9:e9: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BD:42:41:A1:4F:7F:B9:6F:87:11:63:33:48:C2:72:6C:81:F3:B3 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2e:f1:ba:f3:4a:01:43:77:92:89:fb:14:20:6e:ce:fb:7e: ea:ab:ba:c5:e0:da:db:d3:0d:c3:9b:6d:c3:f0:29:2d:c0:d9: 46:b9:3e:15:6c:8b:e3:c5:dc:71:9a:37:8b:56:5f:c5:36:fa: 9e:9a:ec:9e:60:d0:8d:84:35:74:4a:35:a1:38:65:ed:fe:49: d9:0a:4d:f9:fc:8e:a6:95:09:f5:90:a3:64:b4:52:ea:75:f2: c4:f2:a5:05:c2:26:90:ed:9f:6c:f8:b6:2b:01:4c:d2:45:07: 5d:d6:5d:8c:af:1b:87:08:e9:83:4d:01:fa:1c:46:96:e2:67: 99:08:df:21:83:f7:2b:35:f2:f1:0b:b7:a7:1b:e4:e2:8d:b7: cb:73:52:77:4e:1d:c6:d8:af:7f:df:4c:2d:ed:df:b4:74:48: b2:bc:7a:64:c1:59:1f:8b:19:6f:55:48:71:9b:ab:99:b5:56: dc:22:0f:25:be:66:03:16:09:f3:05:e4:fc:73:e0:f1:3e:40: 30:02:f8:3f:49:49:74:d6:3e:ed:79:49:e3:dc:71:04:b4:97: 0e:84:68:19:f6:62:3a:82:b0:43:d3:3a:22:bf:94:3b:de:e4: 26:5a:4a:45:8d:6e:1a:3a:83:a9:96:c0:d5:5c:52:f1:b6:2a: 0d:3f:da:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUwNDI0MjM0MDM4WhcNMjUwNTAxMjM0MDM4WjAYMRYwFAYD VQQDEw02ODBhY2JmNi0wMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLXdqCtZ6iYa+su97Y6STFfgGrMYX6bngKIe3R91vFPBlKfKrnLoDJ1LpXit ilEInTfA+Wsk6uS5xaJ+OctSfXKgF/ACxnzFL2iBJYJkf4O4gsBkYMBpISa+ISbx 8RicNIjTzWdi8LgJY9o9udsnGBgQphIAqKuDITvmvJ8twKqHQ9m7NvUPRwJVnJsT tGIOUCiDL1XHInmet/7bQdwe8Vnjo62Do3w1sW+lOaws7F9FHkmL34IAZE4yXA/g VRiZAYSFmo0g2sSSYD5JLJymkSs+bEHlIhpONJD8+4KdHSl+l/ASYCkPObsAqTqg TC62T4sO1UGQrbOHp5aI2ekOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE69QkGh T3+5b4cRYzNIwnJsgfOzMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtLvG680oBQ3eSifsUIG7O+37qq7rF4Nrb0w3Dm23D8CktwNlGuT4V bIvjxdxxmjeLVl/FNvqemuyeYNCNhDV0SjWhOGXt/knZCk35/I6mlQn1kKNktFLq dfLE8qUFwiaQ7Z9s+LYrAUzSRQdd1l2MrxuHCOmDTQH6HEaW4meZCN8hg/crNfLx C7enG+TijbfLc1J3Th3G2K9/30wt7d+0dEiyvHpkwVkfixlvVUhxm6uZtVbcIg8l vmYDFgnzBeT8c+DxPkAwAvg/SUl01j7teUnj3HEEtJcOhGgZ9mI6grBD0zoiv5Q7 3uQmWkpFjW4aOoOplsDVXFLxtioNP9qI -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:51 2025 by rpki-client